CVE-2024-52615

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Nov 21, 2024
CWE ID 330

Summary

CVE-2024-52615 is a vulnerability affecting the Avahi-daemon software. It was discovered that this application utilizes fixed source ports for wide-area DNS queries, making it easier for attackers to inject malicious DNS responses. This issue can simplify attacks, potentially leading to serious consequences such as redirecting network traffic, conducting phishing attacks, or executing malware. Organizations using Avahi-daemon are advised to apply the necessary patches or updates to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share